This domain, weixinhao.xyz, is flagged as a high-risk generic phishing threat and remains active as of the report date. VirusTotal data shows 3 of 91 security vendors flag this domain, and it appears on one security blocklist. The domain is blocked by PhishDestroy, indicating active threat intelligence recognition. The domain was created on July 04, 2023, and is registered through Gname.com Pte. Ltd., a registrar commonly associated with low-cost, high-volume registrations. Infrastructure analysis reveals the domain resolves to IP address 188.114.96.3, which is within the Cloudflare range, and its nameservers are journey.ns.cloudflare.com and troy.ns.cloudflare.com, both pointing to Cloudflare's managed DNS. This hosting setup provides the domain with anonymity and resilience, as Cloudflare's proxy hides the origin server and offers DDoS protection, making takedown efforts more complex.
The exact content of the site has not been analysed, and no page title, brand target, or scam kit information is present in the available intelligence. The domain name strongly suggests an attempt to impersonate WeChat-related services, given the 'weixin' substring, which is the Chinese name for WeChat, but this inference is based solely on the domain string and not on observed site content. Defenders should treat this as a potential credential-harvesting or fraud portal targeting users of WeChat or related social platforms. Recommended actions include blocking the domain at DNS and proxy levels, adding the IP 188.114.96.3 to threat intelligence feeds, and monitoring for related domains registered under Gname.com with similar naming patterns. Since the domain is active, users who encounter it should be warned against entering credentials or personal data.
The low vendor detection count (3 of 91) suggests the domain may be evading some automated scanners, so manual review and user reporting are critical.